Delete session-id cookie if session not loaded.

To defend against session fixation attacks, delete the session-id cookie if the
store load fails.